An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can lead to denial of service (crashing the TPM chip/process or rendering it unusable) and/or arbitrary code execution in the TPM context.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libtpms | May 15, 2023 | Feb 28, 2023 |
| Centos_linux | — | Upgrade libtpms-debuginfoUpgrade libtpms-debugsourceUpgrade libtpms | May 15, 2023 | Feb 28, 2023 |
| Debian | — | Upgrade libtpms | Jul 30, 2024 | Feb 28, 2023 |
| Msft | — | 2023-03 Cumulative Update for Microsoft Windows Server 2022, version 22H2 (KB5023705)2023-03 Cumulative Update for Microsoft Windows 10, version 22H2 (KB5023696)2023-03 Cumulative Update for Microsoft Windows 11, version 21H2 (KB5023698)2023-03 Cumulative Update for Microsoft Windows Server 2022, version 21H2 (KB5023705)2023-03 Cumulative Update for Microsoft Windows 10, version 1507 (KB5023713)2023-03 Cumulative Update for Microsoft Windows 10, version 21H2 (KB5023696)2023-03 Cumulative Update for Microsoft Windows 10, version 1607 (KB5023697)2023-03 Cumulative Update for Microsoft Windows Server 2019, version 1809 (KB5023702)2023-03 Cumulative Update for Microsoft Windows Server 2016, version 1607 (KB5023697)2023-03 Cumulative Update for Microsoft Windows 10, version 1809 (KB5023702)2023-03 Cumulative Update for Microsoft Windows 11, version 22H2 (KB5023706) | Mar 14, 2023 | Mar 14, 2023 |
| Oracle_linux | — | Upgrade libtpms | May 17, 2023 | Feb 28, 2023 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-storage-gluster-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-nwfilterUpgrade python3-libvirt-debuginfoUpgrade qemu-kvm-hw-usbredirUpgrade lua-guestfs-debuginfoUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-iscsi-debuginfoUpgrade ruby-hivex-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade python3-libguestfsUpgrade netcf-libs-debuginfoUpgrade ocaml-hivexUpgrade libvirtUpgrade libvirt-debugsourceUpgrade python3-hivex-debuginfoUpgrade python3-libnbd-debuginfoUpgrade python3-libvirtUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-testsUpgrade qemu-kvm-ui-spice-debuginfoUpgrade ocaml-libguestfsUpgrade nbdkit-tar-plugin-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade lua-guestfsUpgrade nbdkit-ssh-plugin-debuginfoUpgrade netcf-libsUpgrade nbdkit-gzip-filter-debuginfoUpgrade nbdkit-tar-filter-debuginfoUpgrade libguestfs-gobjectUpgrade ocaml-libnbd-develUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-tar-pluginUpgrade seabiosUpgrade nbdkit-nbd-plugin-debuginfoUpgrade libtpmsUpgrade libiscsi-develUpgrade nbdkit-debugsourceUpgrade libguestfs-gobject-develUpgrade libguestfs-tools-c-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade supermin-debuginfoUpgrade swtpm-tools-pkcs11Upgrade libvirt-daemon-driver-storage-diskUpgrade python3-libnbdUpgrade nbdkit-basic-filtersUpgrade libtpms-develUpgrade hivex-debugsourceUpgrade nbdkit-linuxdisk-pluginUpgrade qemu-kvmUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade qemu-kvm-docsUpgrade ocaml-libnbd-debuginfoUpgrade nbdkit-gzip-pluginUpgrade libguestfs-applianceUpgrade libnbd-debugsourceUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-nodedevUpgrade supermin-develUpgrade swtpm-toolsUpgrade nbdkit-basic-filters-debuginfoUpgrade libiscsiUpgrade nbdkit-tmpdisk-plugin-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade nbdkit-basic-plugins-debuginfoUpgrade libvirt-daemon-kvmUpgrade nbdkit-develUpgrade qemu-kvm-block-rbd-debuginfoUpgrade swtpm-libsUpgrade libguestfs-bash-completionUpgrade ruby-libguestfsUpgrade libguestfs-debuginfoUpgrade libvirt-client-debuginfoUpgrade virt-dib-debuginfoUpgrade swtpm-debuginfoUpgrade perl-Sys-Virt-debugsourceUpgrade libvirt-libs-debuginfoUpgrade swtpm-libs-debuginfoUpgrade python3-libguestfs-debuginfoUpgrade netcfUpgrade ocaml-libnbdUpgrade nbdkit-gzip-filterUpgrade qemu-img-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-dbus-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade libvirt-nssUpgrade libiscsi-utils-debuginfoUpgrade libguestfs-winsupportUpgrade qemu-kvm-coreUpgrade libguestfsUpgrade hivex-develUpgrade SLOFUpgrade libguestfs-inspect-iconsUpgrade swtpm-tools-debuginfoUpgrade perl-hivex-debuginfoUpgrade libnbd-debuginfoUpgrade nbdkit-nbd-pluginUpgrade swtpm-debugsourceUpgrade nbdkit-xz-filterNo solution existsUpgrade libguestfs-man-pages-ukUpgrade libvirt-clientUpgrade libvirt-lock-sanlockUpgrade libiscsi-utilsUpgrade libnbdUpgrade qemu-kvm-block-curlUpgrade nbdfuseUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade libguestfs-gobject-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade seabios-binUpgrade qemu-guest-agentUpgrade libtpms-debuginfoUpgrade nbdkit-xz-filter-debuginfoUpgrade libguestfs-java-develUpgrade virt-v2v-debugsourceUpgrade libguestfs-java-debuginfoUpgrade libvirt-docsUpgrade qemu-kvm-debuginfoUpgrade perl-Sys-Guestfs-debuginfoUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-hw-usbredir-debuginfoUpgrade qemu-kvm-block-ssh-debuginfoUpgrade qemu-kvm-ui-spiceUpgrade sgabiosUpgrade nbdkitUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-python-pluginUpgrade qemu-imgUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-gluster-debuginfoUpgrade nbdkit-example-plugins-debuginfoUpgrade libvirt-develUpgrade netcf-develUpgrade libguestfs-develUpgrade nbdkit-basic-pluginsUpgrade libvirt-lock-sanlock-debuginfoUpgrade ruby-hivexUpgrade virt-v2v-man-pages-jaUpgrade ocaml-hivex-develUpgrade libvirt-debuginfoUpgrade nbdkit-linuxdisk-plugin-debuginfoUpgrade qemu-kvm-debugsourceUpgrade libtpms-debugsourceUpgrade ocaml-libguestfs-develUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-ui-openglUpgrade perl-Sys-Virt-debuginfoUpgrade libguestfs-rsyncUpgrade libnbd-bash-completionUpgrade libvirt-wiresharkUpgrade libvirt-daemonUpgrade libguestfs-xfsUpgrade virt-v2v-debuginfoUpgrade libiscsi-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade nbdfuse-debuginfoUpgrade netcf-debuginfoUpgrade virt-v2v-man-pages-ukUpgrade nbdkit-curl-plugin-debuginfoUpgrade libguestfs-javaUpgrade nbdkit-server-debuginfoUpgrade ocaml-hivex-debuginfoUpgrade ocaml-libguestfs-debuginfoUpgrade nbdkit-ssh-pluginUpgrade libvirt-libsUpgrade swtpm-develUpgrade swtpmUpgrade libguestfs-rescueUpgrade libguestfs-debugsourceUpgrade perl-Sys-VirtUpgrade nbdkit-vddk-pluginUpgrade libguestfs-gfs2Upgrade hivexUpgrade qemu-kvm-block-rbdUpgrade python3-hivexUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libguestfs-toolsUpgrade nbdkit-gzip-plugin-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade hivex-debuginfoUpgrade nbdkit-vddk-plugin-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade superminUpgrade qemu-kvm-block-sshUpgrade nbdkit-bash-completionUpgrade libvirt-dbusUpgrade virt-v2vUpgrade virt-dibUpgrade supermin-debugsourceUpgrade libvirt-daemon-driver-storageUpgrade virt-v2v-bash-completionUpgrade nbdkit-curl-pluginUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libiscsi-debugsourceUpgrade libguestfs-tools-cUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade ruby-libguestfs-debuginfoUpgrade sgabios-binUpgrade qemu-kvm-commonUpgrade nbdkit-tar-filterUpgrade nbdkit-python-plugin-debuginfoUpgrade nbdkit-debuginfoUpgrade libnbd-develUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-dbus-debugsourceUpgrade libvirt-python-debugsourceUpgrade libvirt-daemon-driver-storage-scsiUpgrade netcf-debugsourceUpgrade nbdkit-serverUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-iscsi-direct-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-wireshark-debuginfoUpgrade perl-hivex | Apr 19, 2023 | Feb 28, 2023 |
| Suse | — | Upgrade libtpms0Upgrade libtpms-devel | Apr 28, 2023 | Feb 28, 2023 |
| Ubuntu | — | Upgrade libtpms0 | Mar 22, 2023 | Feb 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub